The European Court of Justice (ECJ) has ruled on whether fines for violations of the General Data Protection Regulation (GDPR) should be based on the turnover of the specific company involved or the entire corporate group. Until now, it was unclear whether only the turnover of the individual entity responsible for the violation should be … Read more
Consent banners – everyone knows them, few like them, yet they have become an (almost) indispensable part of websites. Their purpose is to transparently inform users about the use of cookies and similar technologies, as well as the associated data processing, and to document consent. Sounds simple, right? Unfortunately, it’s not! Many companies make serious … Read more
GDPR Compensation and Injunctive Claims Expire After Three Years The Regional Court of Duisburg (LG Duisburg) ruled on November 8, 2024 (Case No.: 2 O 31/24) that claims for damages under the General Data Protection Regulation (GDPR) are subject to the standard limitation period and therefore expire after three years. This decision clarifies the limitation … Read more
On November 28, 2024 (Case C-169/23), the European Court of Justice (ECJ) issued a landmark ruling on the information obligation under the General Data Protection Regulation (GDPR). The decision clarifies the scope of the information obligation for personal data not collected directly from individuals. The court expanded the exceptions under Article 14 GDPR: These now … Read more
The Hamburg Regional Labor Court (LAG) ruled on June 11, 2024 (Case No.: 3 SLa 2/24) that claims under the General Data Protection Regulation (GDPR), such as access or compensation claims, can be restricted by contractual exclusion periods in employment contracts. This decision is particularly relevant for employers, as it allows them to set time … Read more
The French data protection authority CNIL announced in a recent press release that a fine of €50 million has been imposed on the telecommunications provider ORANGE. The penalty was issued due to unauthorized inbox advertising and reading of cookies despite users withdrawing consent. This decision highlights the strict stance of data protection authorities against companies … Read more
The Chemnitz District Court (AG Chemnitz) ruled on November 22, 2024 – Case No. 16 C 1063/24, that the right of access under Article 15 of the General Data Protection Regulation (GDPR) is not subject to any statute of limitations and can therefore be exercised at any time. This decision is significant for affected individuals as it strengthens their ability to obtain information about the processing of their personal data even after a long period.
€10,000 GDPR compensation for the unauthorized publication of health data
© Copyright 2021 mip Consult GmbH. All Rights Reserved.